CVE-2014-9706

The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path…

published March 31, 2015

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04996 · 92.2th percentile
Published
2015-03-31T14:00Z
EPSS history
Timeline
  • 31 MAR 14:00Z
    The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path…
    cvelistv5